Privacy Policy

Privacy Policy Page Effective date: 11/10/2025

1) Who we are

Centre Radiologie Diouri (the “Centre”, “we”, “us”) — 154 bis Avenue Mohamed Diouri, Kénitra 14020, Morocco.

Tel: 05 37 36 43 29 / 06 64 82 53 04. Email: contact@centreradiologiediouri.ma / diouriradiologie@gmail.com.

2) Scope

This policy explains how we collect, use, share and protect personal data when you visit centreradiologiediouri.ma or contact us (phone, email, WhatsApp, in person) and when we provide radiology services (appointments, imaging exams, results).

3) What data we collect

• Identification & contact: name, phone, email, address, date of birth, ID/passport number (if needed), insurer/coverage details.
• Medical data (sensitive): prescription/referral, clinical information you provide, images (X‑ray, ultrasound, CT/IRM), exam reports, history of care, allergies, pregnancy status when relevant.
• Administrative & billing: appointment details, invoices, payment info (no card data is stored on our servers if you pay by terminal/processor).
• Communications: calls, emails, messages (including via WhatsApp, if you choose to contact us there).
• Technical: device, browser, IP address, pages visited, cookies and similar technologies (see “Cookies”).

4) Purposes of processing

We process data to:

• schedule and manage appointments and patient reception;
• perform, interpret and report imaging exams;
• deliver results and communicate with you and your referring doctor (on paper, digital media, secure link, or email if you request it);
• manage billing and reimbursement;
• ensure quality, safety and training; handle incidents and complaints;
• comply with legal and regulatory obligations;
• (optional) send service updates or satisfaction surveys — only with your consent and with an unsubscribe option.

5) Legal basis under Moroccan law (Law No. 09‑08)

• Consent (e.g., contact forms, optional communications);
• Performance of a contract (providing care you requested);
• Legal obligations (medical record keeping, patient safety);
• Vital interests / public health where applicable.

Health data is processed by or under the responsibility of healthcare professionals bound by medical secrecy. Where required, processing of sensitive data and any international transfers are declared to and/or authorized by the CNDP (National Commission for the Protection of Personal Data).

6) How long we keep your data

We retain personal data only as long as necessary for the purposes above and to comply with legal, regulatory, and professional obligations (including medical‑record retention rules). Contact/website enquiries are generally kept for a limited period after your last interaction; patient files are retained for the legally required period. When the retention period ends, we securely delete or anonymize data.

7) Who we share data with

• members of our care team and authorized staff on a need‑to‑know basis;
• your referring physician or other care providers with your agreement or as required for your care;
• trusted IT and medical service providers (e.g., RIS/PACS hosting, secure archiving, teleradiology where applicable, maintenance), bound by confidentiality and security obligations;
• insurers and third parties when required by law or with your consent; and
• authorities if the law requires.

We do not sell your personal data.

8) International transfers

Some technical providers (e.g., secure cloud services or messaging services you choose to use) may process data outside Morocco. We only do so when necessary and with appropriate safeguards in line with Law 09‑08, including prior CNDP authorization when required. If you contact us via third‑party apps (e.g., WhatsApp), those providers process your data under their own terms.

9) Cookies and analytics

Our website uses essential cookies to make it work, and may use optional analytics cookies to improve performance. Where required, we will ask for your consent before setting non‑essential cookies. You can change your preferences at any time via the cookie banner or your browser settings.

Types of cookies: strictly necessary; performance/analytics (e.g., pages visited); functionality (e.g., language choice). We do not use cookies for targeted ads.

10) Your rights

Under Law 09‑08, you have the right to access, rectify, and oppose the processing of your personal data. You may also request erasure where the law allows and withdraw consent for optional uses.

To exercise your rights, contact us (see Section 1). Please include a copy of an identity document so we can verify your request. If you believe your rights are not respected, you can lodge a complaint with the CNDP.

11) Security

We implement technical and organizational measures appropriate to medical data (access controls, secure storage, encryption where applicable, staff confidentiality, backups). However, no system is perfectly secure; please avoid sending sensitive medical information via unsecured channels.

12) Minors

When applicable, we process minors’ data with the authorization of the parent or legal guardian and in the child’s best interests.

13) Updates to this policy

We may update this policy to reflect legal or operational changes. We will post the new version on this page and change the “Effective date”.